[INFORMATIONAL] Gmail S/MIME Trusted Root List Update

[Erhan Nergiz]

All,

The Gmail Security team has updated the trusted root list for Gmail S/MIME as follows:

Removed trusted roots:

• CN=AC Raíz Certicámara S.A.,O=Sociedad Cameral de Certificación Digital - Certicámara S.A.,C=CO

• SHA256 Thumbprint: A6C51E0DA5CA0A9309D2E4C0E40C2AF9107AAE8203857FE198E3E769E343085C

• CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

• SHA256 Thumbprint: 687FA451382278FFF0C8B11F8D43D576671C6EB2BCEAB413FB83D965D06D2FF2

• CN=Autoridad de Certificacion Firmaprofesional CIF A62634068,C=ES

• SHA256 Thumbprint: 04048028BF1F2864D48F9AD4D83294366A828856553F3B14303F90147F5D40EF

• SERIALNUMBER=A82743287,CN=Chambers of Commerce Root - 2008,O=AC Camerfirma S.A.,L=Madrid (see current address at www.camerfirma.com/address),C=EU

• SHA256 Thumbprint: 063E4AFAC491DFD332F3089B8542E94617D893D7FE944E10A7937EE29D9693C0

• CN=Chambers of Commerce Root,OU=http://www.chambersign.org,O=AC Camerfirma SA CIF A82743287,C=EU

• SHA256 Thumbprint: 0C258A12A5674AEF25F28BA7DCFAECEEA348E541E6F5CC4EE63B71B361606AC3

• CN=Class 2 Primary CA,O=Certplus,C=FR

• SHA256 Thumbprint: 0F993C8AEF97BAAF5687140ED59AD1821BB4AFACF0AA9A58B5D57A338A3AFBCB

• CN=Deutsche Telekom Root CA 2,OU=T-TeleSec Trust Center,O=Deutsche Telekom AG,C=DE

• SHA256 Thumbprint: B6191A50D0C3977F7DA99BCDAAC86A227DAEB9679EC70BA3B0C9D92271C170D3

• CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US

• SHA256 Thumbprint: FF856A2D251DCD88D36656F450126798CFABAADE40799C722DE4D2B5DB36A73A

• CN=GeoTrust Primary Certification Authority - G2,OU=(c) 2007 GeoTrust Inc. - For authorized use only,O=GeoTrust Inc.,C=US

• SHA256 Thumbprint: 5EDB7AC43B82A06A8761E8D7BE4979EBF2611F7DD79BF91C1C6B566A219ED766

• CN=GeoTrust Primary Certification Authority - G3,OU=(c) 2008 GeoTrust Inc. - For authorized use only,O=GeoTrust Inc.,C=US

• SHA256 Thumbprint: B478B812250DF878635C2AA7EC7D155EAA625EE82916E2CD294361886CD1FBD4

• CN=GeoTrust Universal CA 2,O=GeoTrust Inc.,C=US

• SHA256 Thumbprint: A0234F3BC8527CA5628EEC81AD5D69895DA5680DC91D1CB8477F33F878B95B0B

• CN=GeoTrust Universal CA,O=GeoTrust Inc.,C=US

• SHA256 Thumbprint: A0459B9F63B22559F5FA5D4C6DB3F9F72FF19342033578F073BF1D1B46CBB912

• SERIALNUMBER=A82743287,CN=Global Chambersign Root - 2008,O=AC Camerfirma S.A.,L=Madrid (see current address at www.camerfirma.com/address),C=EU

• SHA256 Thumbprint: 136335439334A7698016A0D324DE72284E079D7B5220BB8FBD747816EEBEBACA

• CN=Global Chambersign Root,OU=http://www.chambersign.org,O=AC Camerfirma SA CIF A82743287,C=EU

• SHA256 Thumbprint: EF3CB417FC8EBF6F97876C9E4ECE39DE1EA5FE649141D1028B7D11C0B2298CED

• CN=GlobalSign,OU=GlobalSign ECC Root CA - R4,O=GlobalSign

• SHA256 Thumbprint: BEC94911C2955676DB6C0A550986D76E3BA005667C442C9762B4FBB773DE228C

• CN=GlobalSign,OU=GlobalSign Root CA - R2,O=GlobalSign

• SHA256 Thumbprint: CA42DD41745FD0B81EB902362CF9D8BF719DA1BD1B1EFC946F5B4C99F42C1B9E

• CN=Hellenic Academic and Research Institutions RootCA 2011,O=Hellenic Academic and Research Institutions Cert. Authority,C=GR

• SHA256 Thumbprint: BC104F15A48BE709DCA542A7E1D4B9DF6F054527E802EAA92D595444258AFE71

• CN=OISTE WISeKey Global Root GC CA,OU=OISTE Foundation Endorsed,O=WISeKey,C=CH

• SHA256 Thumbprint: 8560F91C3624DABA9570B5FEA0DBE36FF11A8323BE9486854FB3F34A5571198D

• CN=QuoVadis Root Certification Authority,OU=Root Certification Authority,O=QuoVadis Limited,C=BM

• SHA256 Thumbprint: A45EDE3BBBF09C8AE15C72EFC07268D693A21C996FD51E67CA079460FD6D8873

• CN=Sonera Class2 CA,O=Sonera,C=FI

• SHA256 Thumbprint: 7908B40314C138100B518D0735807FFBFCF8518A0095337105BA386B153DD927

• CN=Staat der Nederlanden Root CA - G2,O=Staat der Nederlanden,C=NL

• SHA256 Thumbprint: 668C83947DA63B724BECE1743C31A0E6AED0DB8EC5B31BE377BB784F91B6716F

• CN=Swisscom Root CA 2,OU=Digital Certificate Services,O=Swisscom,C=ch

• SHA256 Thumbprint: F09B122C7114F4A09BD4EA4F4A99D558B46E4C25CD81140D29C05613914C3841

• CN=SwissSign Platinum CA - G2,O=SwissSign AG,C=CH

• SHA256 Thumbprint: 3B222E566711E992300DC0B15AB9473DAFDEF8C84D0CEF7D3317B4C1821D1436

• CN=Symantec Class 1 Public Primary Certification Authority - G4,OU=Symantec Trust Network,O=Symantec Corporation,C=US

• SHA256 Thumbprint: 363F3C849EAB03B0A2A0F636D7B86D04D3AC7FCFE26A0A9121AB9795F6E176DF

• CN=Symantec Class 1 Public Primary Certification Authority - G6,OU=Symantec Trust Network,O=Symantec Corporation,C=US

• SHA256 Thumbprint: 9D190B2E314566685BE8A889E27AA8C7D7AE1D8AADDBA3C1ECF9D24863CD34B9

• CN=Symantec Class 2 Public Primary Certification Authority - G4,OU=Symantec Trust Network,O=Symantec Corporation,C=US

• SHA256 Thumbprint: FE863D0822FE7A2353FA484D5924E875656D3DC9FB58771F6F616F9D571BC592

• CN=Symantec Class 2 Public Primary Certification Authority - G6,OU=Symantec Trust Network,O=Symantec Corporation,C=US

• SHA256 Thumbprint: CB627D18B58AD56DDE331A30456BC65C601A4E9B18DEDCEA08E7DAAA07815FF0

• CN=TrustCor ECA-1,OU=TrustCor Certificate Authority,O=TrustCor Systems S. de R.L.,L=Panama City,ST=Panama,C=PA

• SHA256 Thumbprint: 5A885DB19C01D912C5759388938CAFBBDF031AB2D48E91EE15589B42971D039C

• CN=TrustCor RootCert CA-1,OU=TrustCor Certificate Authority,O=TrustCor Systems S. de R.L.,L=Panama City,ST=Panama,C=PA

• SHA256 Thumbprint: D40E9C86CD8FE468C1776959F49EA774FA548684B6C406F3909261F4DCE2575C

• CN=TrustCor RootCert CA-2,OU=TrustCor Certificate Authority,O=TrustCor Systems S. de R.L.,L=Panama City,ST=Panama,C=PA

• SHA256 Thumbprint: 0753E940378C1BD5E3836E395DAEA5CB839E5046F1BD0EAE1951CF10FEC7C965

• CN=UTN-USERFirst-Client Authentication and Email,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

• SHA256 Thumbprint: 43F257412D440D627476974F877DA8F1FC2444565A367AE60EDDC27A412531AE

• CN=VeriSign Class 1 Public Primary Certification Authority - G3,OU=VeriSign Trust Network+OU=(c) 1999 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

• SHA256 Thumbprint: CBB5AF185E942A2402F9EACBC0ED5BB876EEA3C1223623D00447E4F3BA554B65

• CN=VeriSign Class 2 Public Primary Certification Authority - G3,OU=VeriSign Trust Network+OU=(c) 1999 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

• SHA256 Thumbprint: 92A9D9833FE1944DB366E8BFAE7A95B6480C2D6C6C2A1BE65D4236B608FCA1BB

• CN=VeriSign Class 3 Public Primary Certification Authority - G3,OU=VeriSign Trust Network+OU=(c) 1999 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

• SHA256 Thumbprint: EB04CF5EB1F39AFA762F2BB120F296CBA520C1B97DB1589565B81CB9A17B7244

• CN=VeriSign Class 3 Public Primary Certification Authority - G4,OU=VeriSign Trust Network+OU=(c) 2007 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

• SHA256 Thumbprint: 69DDD7EA90BB57C93E135DC85EA6FCD5480B603239BDC454FC758B2A26CF7F79

• CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

• SHA256 Thumbprint: 9ACFAB7E43C8D880D06B262A94DEEEE4B4659989C3D0CAF19BAF6405E41AB7DF

• CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

• SHA256 Thumbprint: 2399561127A57125DE8CEFEA610DDF2FA078B5C8067F4E828290BFB860E84B3C

• O=Government Root Certification Authority,C=TW

• SHA256 Thumbprint: 7600295EEFE85B9E1FD624DB76062AAAAE59818A54D2774CD4C0B2C01131E1B3

• OU=Security Communication RootCA1,O=SECOM Trust.net,C=JP

• SHA256 Thumbprint: E75E72ED9F560EEC6EB4800073A43FC3AD19195A392282017895974A99026B6C

• OU=Trustis FPS Root CA,O=Trustis Limited,C=GB

• SHA256 Thumbprint: C1B48299ABA5208FE9630ACE55CA68A03EDA5A519C8802A0D3A673BE8F8E557D

Newly added trusted roots:

• CN=Atos TrustedRoot Root CA ECC G2 2020,O=Atos,C=DE

• SHA256 Thumbprint: E38655F4B0190C84D3B3893D840A687E190A256D98052F159E6D4A39F589A6EB

• CN=Atos TrustedRoot Root CA RSA G2 2020,O=Atos,C=DE

• SHA256 Thumbprint: 78833A783BB2986C254B9370D3C20E5EBA8FA7840CBF63FE17297A0B0119685E

• CN=BJCA Global Root CA1,O=BEIJING CERTIFICATE AUTHORITY,C=CN

• SHA256 Thumbprint: F3896F88FE7C0A882766A7FA6AD2749FB57A7F3E98FB769C1FA7B09C2C44D5AE

• CN=BJCA Global Root CA2,O=BEIJING CERTIFICATE AUTHORITY,C=CN

• SHA256 Thumbprint: 574DF6931E278039667B720AFDC1600FC27EB66DD3092979FB73856487212882

• CN=Certum EC-384 CA,OU=Certum Certification Authority,O=Asseco Data Systems S.A.,C=PL

• SHA256 Thumbprint: 6B328085625318AA50D173C98D8BDA09D57E27413D114CF787A0F5D06C030CF6

• CN=Certum Trusted Root CA,OU=Certum Certification Authority,O=Asseco Data Systems S.A.,C=PL

• SHA256 Thumbprint: FE7696573855773E37A95E7AD4D9CC96C30157C15D31765BA9B15704E1AE78FD

• CN=D-Trust SBR Root CA 1 2022,O=D-Trust GmbH,C=DE

• SHA256 Thumbprint: D92C171F5CF890BA428019292927FE22F3207FD2B54449CB6F675AF4922146E2

• CN=D-Trust SBR Root CA 2 2022,O=D-Trust GmbH,C=DE

• SHA256 Thumbprint: DBA84DD7EF622D485463A90137EA4D574DF8550928F6AFA03B4D8B1141E636CC

• CN=DigiCert SMIME ECC P384 Root G5,O=DigiCert\, Inc.,C=US

• SHA256 Thumbprint: E8E8176536A60CC2C4E10187C3BEFCA20EF263497018F566D5BEA0F94D0C111B

• CN=DigiCert SMIME RSA4096 Root G5,O=DigiCert\, Inc.,C=US

• SHA256 Thumbprint: 90370D3EFA88BF58C30105BA25104A358460A7FA52DFC2011DF233A0F417912A

• CN=DIGITALSIGN GLOBAL ROOT ECDSA CA,O=DigitalSign Certificadora Digital,C=PT

• SHA256 Thumbprint: 261D7114AE5F8FF2D8C7209A9DE4289E6AFC9D717023D85450909199F1857CFE

• CN=DIGITALSIGN GLOBAL ROOT RSA CA,O=DigitalSign Certificadora Digital,C=PT

• SHA256 Thumbprint: 82BD5D851ACF7F6E1BA7BFCBC53030D0E7BC3C21DF772D858CAB41D199BDF595

• CN=e-Szigno Root CA 2017,O=Microsec Ltd.,L=Budapest,C=HU,2.5.4.97=#130e56415448552d3233353834343937

• SHA256 Thumbprint: BEB00B30839B9BC32C32E4447905950641F26421B15ED089198B518AE2EA1B99

• CN=Entrust Root Certification Authority - G4,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

• SHA256 Thumbprint: DB3517D1F6732A2D5AB97C533EC70779EE3270A62FB4AC4238372460E6F01E88

• CN=GlobalSign Secure Mail Root E45,O=GlobalSign nv-sa,C=BE

• SHA256 Thumbprint: 5CBF6FB81FD417EA4128CD6F8172A3C9402094F74AB2ED3A06B4405D04F30B19

• CN=GlobalSign Secure Mail Root R45,O=GlobalSign nv-sa,C=BE

• SHA256 Thumbprint: 319AF0A7729E6F89269C131EA6A3A16FCD86389FDCAB3C47A4A675C161A3F974

• CN=GlobalSign,OU=GlobalSign ECC Root CA - R4,O=GlobalSign

• SHA256 Thumbprint: B085D70B964F191A73E4AF0D54AE7A0E07AAFDAF9B71DD0862138AB7325A24A2

• CN=GLOBALTRUST 2020,O=e-commerce monitoring GmbH,C=AT

• SHA256 Thumbprint: 9A296A5182D1D451A2E37F439B74DAAFA267523329F90F9A0D2007C334E23C9A

• CN=GTS Root R1,O=Google Trust Services LLC,C=US

• SHA256 Thumbprint: D947432ABDE7B7FA90FC2E6B59101B1280E0E1C7E4E40FA3C6887FFF57A7F4CF

• CN=GTS Root R2,O=Google Trust Services LLC,C=US

• SHA256 Thumbprint: 8D25CD97229DBF70356BDA4EB3CC734031E24CF00FAFCFD32DC76EB5841C7EA8

• CN=GTS Root R3,O=Google Trust Services LLC,C=US

• SHA256 Thumbprint: 34D8A73EE208D9BCDB0D956520934B4E40E69482596E8B6F73C8426B010A6F48

• CN=GTS Root R4,O=Google Trust Services LLC,C=US

• SHA256 Thumbprint: 349DFA4058C5E263123B398AE795573C4E1313C83FE68F93556CD5E8031B3C7D

• CN=HARICA Client ECC Root CA 2021,O=Hellenic Academic and Research Institutions CA,C=GR

• SHA256 Thumbprint: 8DD4B5373CB0DE36769C12339280D82746B3AA6CD426E797A31BABE4279CF00B

• CN=HARICA Client RSA Root CA 2021,O=Hellenic Academic and Research Institutions CA,C=GR

• SHA256 Thumbprint: 1BE7ABE30686B16348AFD1C61B6866A0EA7F4821E67D5E8AF937CF8011BC750D

• CN=LAWtrust Root CA2 (4096),O=LAWtrust,C=ZA

• SHA256 Thumbprint: 48E1CF9E43B688A51044160F46D773B8277FE45BEAAD0E4DF90D1974382FEA99

• CN=Sectigo Public Email Protection Root E46,O=Sectigo Limited,C=GB

• SHA256 Thumbprint: 22D9599234D60F1D4BC7C7E96F43FA555B07301FD475175089DAFB8C25E477B3

• CN=Sectigo Public Email Protection Root R46,O=Sectigo Limited,C=GB

• SHA256 Thumbprint: D5917A7791EB7CF20A2E57EB98284A67B28A57E89182DA53D546678C9FDE2B4F

• CN=Security Communication ECC RootCA1,O=SECOM Trust Systems CO.\,LTD.,C=JP

• SHA256 Thumbprint: E74FBDA55BD564C473A36B441AA799C8A68E077440E8288B9FA1E50E4BBACA11

• CN=Security Communication RootCA3,O=SECOM Trust Systems CO.\,LTD.,C=JP

• SHA256 Thumbprint: 24A55C2AB051442D0617766541239A4AD032D7C55175AA34FFDE2FBC4F5C5294

• CN=SSL.com Client ECC Root CA 2022,O=SSL Corporation,C=US

• SHA256 Thumbprint: AD7DD58D03AEDB22A30B5084394920CE12230C2D8017AD9B81AB04079BDD026B

• CN=SSL.com Client RSA Root CA 2022,O=SSL Corporation,C=US

• SHA256 Thumbprint: 1D4CA4A2AB21D0093659804FC0EB2175A617279B56A2475245C9517AFEB59153

• CN=Telekom Security SMIME ECC Root 2021,O=Deutsche Telekom Security GmbH,C=DE

• SHA256 Thumbprint: 3AE6DF7E0D637A65A8C81612EC6F9A142F85A16834C10280D88E707028518755

• CN=Telekom Security SMIME RSA Root 2023,O=Deutsche Telekom Security GmbH,C=DE

• SHA256 Thumbprint: 78A656344F947E9CC0F734D9053D32F6742086B6B9CD2CAE4FAE1A2E4EFDE048

• CN=Telia Root CA v2,O=Telia Finland Oyj,C=FI

• SHA256 Thumbprint: 242B69742FCB1E5B2ABF98898B94572187544E5B4D9911786573621F6A74B82C

• CN=TrustAsia Global Root CA G3,O=TrustAsia Technologies\, Inc.,C=CN

• SHA256 Thumbprint: E0D3226AEB1163C2E48FF9BE3B50B4C6431BE7BB1EACC5C36B5D5EC509039A08

• CN=TrustAsia Global Root CA G4,O=TrustAsia Technologies\, Inc.,C=CN

• SHA256 Thumbprint: BE4B56CB5056C0136A526DF444508DAA36A0B54F42E4AC38F72AF470E479654C

• CN=Trustwave Global Certification Authority,O=Trustwave Holdings\, Inc.,L=Chicago,ST=Illinois,C=US

• SHA256 Thumbprint: 97552015F5DDFC3C8788C006944555408894450084F100867086BC1A2BB58DC8

• CN=Trustwave Global ECC P256 Certification Authority,O=Trustwave Holdings\, Inc.,L=Chicago,ST=Illinois,C=US

• SHA256 Thumbprint: 945BBC825EA554F489D1FD51A73DDF2EA624AC7019A05205225C22A78CCFA8B4

• CN=Trustwave Global ECC P384 Certification Authority,O=Trustwave Holdings\, Inc.,L=Chicago,ST=Illinois,C=US

• SHA256 Thumbprint: 55903859C8C0C3EBB8759ECE4E2557225FF5758BBD38EBD48276601E1BD58097

The new trusted root list is in effect now, for future reference please note that we will send an update to this list before updating the trusted list from now on. 

Thank you

-Erhan, on behalf of the Gmail Security team

[Antti Backman]

Hi,

Thank you Erhan and the whole Gmail Security team, we really appreciate this update

Cheers, Antti / Telia